Vserver Management Error: Failed to add the Cserver record in RDB . The certificate has expired.

[adminqskills]

hi all,

we are getting this error:

Vserver Management Error: Failed to add the Cserver record in RDB . The certificate has expired.

creating cluster setup fro scratch. Has anybody an idea how to fix this?

thanks in advance 

[vanhees]

I have the same issue both with 9.3/9.5. Freshly downloaded. 

[adminqskills]

seems to be a bigger problem which more people ran in.

As far as we see, simulators also are affected

[adminqskills]

workaround: set time of the filer in the past, do the cluster setup . After that you can  set back to correct time.  
That worked for us. Netapp is looking for a solution. I think this will be fixed by a new ontap release

[JGRUBERFS]

Just ran into this issue while setting up four systems.

[SeanHatfield]

Set a watch on this burt:

https://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=1250500

[Zulhadi]

I also received same error when try create a cluster on netaontap simulator 9.2P4. Anyone have solution for this issue/bugs?

[adminqskills]

same workaround as on physical systems.

set the time of the vsim for example to one month in the past. Do the cluster setup and then switch back to 

correct time.

[Zulhadi]

where can i get step to do this workaround. I'm quite new to netapp and now just apply the simulator for get familiar with the ontap. Please advise sir

[vanhees]

Hi, when you start the VM, enter the BIOS first by pressing ESC or Enter in Vmware. Then change the date / time to before 6 july 2019. After that re-start the VM and do the installation as described in the SIMULATOR documentation. 

[adminqskills · Accepted solution]

From netapp support:

For fresh cluster installations - 9.2, 9.3, 9.4, 9.5, 9.6
1. Set the date prior to July 6, 2019.
2. Run the cluster create steps.
3. Reset the date back to current date.

The news about release with fix you can follow up on BOG ONLINE via WATCH THIS Bug at the end of the page:

https://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=1250500

[davidrnexon]

This is why the issue is happening, when the cluster gets created it is assigned a certificate with expiry of Sat Jul 6, 2019

You can see this on the simulator

CLUSTER96::> certificate show -expiration *2019*
(security certificate show)
Vserver Serial Number Certificate Name Type
---------- --------------- -------------------------------------- ------------
CLUSTER96 85BD4BF3D8DAE369F694D75FC3A54423
Class2PrimaryCA server-ca
Certificate Authority: Class 2 Primary CA
Expiration Date: Sat Jul 06 23:59:59 2019

CLUSTER96 26 DeutscheTelekomRootCA2 server-ca
Certificate Authority: Deutsche Telekom Root CA 2
Expiration Date: Tue Jul 09 23:59:00 2019

CLUSTER96 44BE0C8B500024B411D3362AFE650AFD
UTN-USERFirst-Hardware server-ca
Certificate Authority: UTN-USERFirst-Hardware
Expiration Date: Tue Jul 09 18:19:22 2019

[NetAppUser20]

You will also find you don't have a management web server and can't create one:

<host>::system services web> ?
  modify                      Modify the cluster-level configuration of web
                              protocols
  node>                       Manage the nodes' web servers
  show                        Display the cluster-level configuration of web
                              protocols

<host>::system services web> show
This table is currently empty.

That should never happen.

[VWIPL]

It's not working

[jdonthn]

hi can you provide complete steps on how you fixed this issue? how did you set the date back. if you specific command can you please share?

[JGRUBERFS]

On a new cluster setup you proceed like normal. It will error out on the cluster setup for the first node because of the certificate issue.

Then it will exit to a login, login with admin and the password you just created.

First I set the date to June first (just needs to be prior to 7/6/2019)

cluster1::> date 201906011200

cluster1::> cluster create -clustername cluster1

cluster1::> cluster setup

Then continue with the normal cluster setup on node 1 and node 2.

[ninjago]

Is there a fix for ONTAP Select when the cluster is being created through the Deploy image? This is the same error when building OTS clusters.

[SeanHatfield]

There is, but its a bit more involved.  It's documented on the internal notes for that burt.  Alternatively, set the hosts clock back in time prior to deploying Select.  The VM clock will inherit the host clock when it boots.

[SeanHatfield]

The ONTAP Select 9.6 GA version is available for download now, which includes the fix for this issue.

[davidrnexon]

I've upgraded my simulator to 9.6GA and it looks like the issue has been resolved. I was able to re-initialize the cluster, run through the setup wizard, and it completed successfully.

There are now no expirying certificates for 2019

CLUSTER96::> security certificate show -expiration *2019*
There are no entries matching your query.